Senior Security & Technology Risk Analyst – Certification & Assurance

About the role

The Vocalink Control Office is seeking a Senior Technology Risk Analyst with strong information security expertise to join the Certification and Assurance team at Vocalink Limited. The role supports certification audits, assurance activities and control testing to maintain and demonstrate compliance with a range of security standards.

Key responsibilities

• Support preparation for annual certification audits.
• Assess and validate controls against standards such as ISO27001, ISO22301, PCI DSS, PCI PIN, Swift and ISAE3000.
• Assist in managing certifications and assurance activities, including ISO27001 and PCI DSS.
• Prepare detailed control testing documentation, test procedures, results and evidence.
• Collect evidence from control owners and execute periodic control testing.
• Identify control deficiencies, escalate issues and support remediation.
• Collaborate with control owners, 1st line teams and 2nd line security partners to ensure accurate testing outcomes.
• Support the team director in delivering the Certification and Assurance plan.

Required profile

• Proven experience with at least one security standard and ability to analyse or implement information security controls.
• Strong understanding of security and technology control frameworks.
• Ability to work with control owners and stakeholders to gather evidence and resolve deficiencies.

Required skills

• ISO27001
• ISO22301
• PCI DSS
• PCI PIN
• Swift
• ISAE3000